Atlassian-Azure AD SSO testing

TANG_Jia_Bin

I am going to do a POC on the Atlassian-Azure AD SSO testing using my email and have a few clarifications:-

1. The homepage url and Assertion consumer service url, is it the same landing page based on organization created? In this case stb-batik.atlassian.net
2. What are the mandatory user attributes required for SSO and what are the available attributes that I can map. Is that a Atlassian page that I can see the entire list of attributes mapping?
3. For logout, I notice that the logout url could be either https://stb-batik.atlassian.net/logout? or https://id.atlassian.com/logout depending on whether I am at jira, confluence or admin.atlassian.com. How can I ensure a successful logout? is there a saml2 logout url?

 

 

 

Connor_lld39i

Hi @TANG_Jia_Bin if you haven't already I suggest reading through all of Atlassian's documentation regarding SSO starting with this page, as well as Microsoft's documentation. 

1. My sign on URL in AAD is blank, we initiate login from our AAD accounts, and if logging in from the Atlassian login page we get redirected to login with our AAD accounts. The assertion consumer service URL used within my org looks like https://auth.atlassian.com/login/callback?connection=saml{ID}, I suspect yours should look similar.
2. The Atlassian doc I linked has a section describing SAML attributes.
3. My logout URL in AAD is also blank, it's an optional field just like the sign on URL. From whatever Atlassian product I'm using if I click logout I get logged out successfully.